Supply Chain Incidents

MAL-2025-188970

Malicious code in pulsar-graviton-dotenv-safe-nuxtjs (npm)

MAL-2025-186209

Malicious code in colors-style-loader-bellatrix-tool (npm)

MAL-2025-186740

Malicious code in encode-rain-refactor-execute-pi (npm)

MAL-2025-189082

Malicious code in rate-limiter-chalk-miranda-cassini (npm)

MAL-2025-186943

Malicious code in farout-resolvers-photon-blazar (npm)

MAL-2025-186619

Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)

MAL-2025-186428

Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin (npm)

MAL-2025-187089

Malicious code in galaxy-xanthus-perseus-subscription (npm)

MAL-2025-185843

Malicious code in blackhole-jupiter-spectron-webdriver-meteor (npm)

MAL-2025-186729

Malicious code in enceladus-bionics-pulsar-izar (npm)

MAL-2025-187377

Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection (npm)

MAL-2025-189335

Malicious code in sandbox-bash-authorize-hot-simulate (npm)

MAL-2025-188824

Malicious code in private-cluster-draco-mysql (npm)

MAL-2025-185966

Malicious code in cache-norma-protractor-superflare (npm)

MAL-2025-188495

Malicious code in package-uninstall-scorpius-react-bootstrap (npm)

MAL-2025-186500

Malicious code in decode-export-data-cold-error (npm)

MAL-2025-188016

Malicious code in meteor-chalk-blueshift-gulp (npm)

MAL-2025-186450

Malicious code in cypress-procyon-neptune-epigenetics (npm)

MAL-2025-190128

Malicious code in user-root-node-transpile-class (npm)

MAL-2025-187701

Malicious code in koa-prettier-stylelint-link-google (npm)

MAL-2025-187255

Malicious code in gulp-prettier-spinner-parallax (npm)

MAL-2025-190464

Malicious code in zephyr-hyperion-cypress-pulsar (npm)

MAL-2025-187880

Malicious code in luna-sequelize-markdown-pdf-meissa (npm)

MAL-2025-185622

Malicious code in async-iota-pavo-quasar (npm)